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Preliminary Amendment 

Amendments to the Claims 

1 . (Original) A method for the multi-exponentiation (11/= i'' gf*) or the multi-scalar 
multiplication (S/=i'' eigi) of elements (jgi) by means of in each case at least one exponent or 
scalar (e,), in particular an integer exponent or scalar, which has in each case a maximum bit 
rate (n) or bit length, in particular for the exponentiation (jg^) or scalar multiplication (e g) of 
an element (g) by means of at least one exponent or scalar in particular an integer 
exponent or scalar, which has in each case a maximum bit rate (n) or bit length, which 
elements (g,; g) derive from at least one group (G), for example an Abelian group, which 

in the case of (multi-)exponentiation is notated in particular multiplicatively 
and 

in the case of (multi-)scalar multiplication is notated in particular additively, 
characterized by the following method steps: 
[a. 1 ] computing and storing or 

[a.2] retrieving from at least one memory 

all powers or all multiples (cgi)^ wherein c is a permissible positive 

coefficient; 

[b] dividing each exponent or scalar (e,) into a number of chunks or into a 

number of parts (e^) having a chunk or part width defined by a specific bit 
rate (L); and 

[c] individually receding the chunks or parts (^/.a). 

2. (Original) A method as claimed in claim I , characterized in that the exponent or 
scalar (e,) is represented in the divided form = Za=o'^ e;.*2*^, wherein 

r is defined as the number of chunks or parts (^^.jtX in particular as an integer 
quotient of the maximum bit rate (w) and the bit rate (L) of the chunk or part 
width, and 
0 < < 2\ 

3. (Currently Amended) A method as claimed in claim 1 or 2 c laim 1. characterized in 
that the chunk or part width (L) is selected to be 

significantly greater than a parameter (w) which corresponds to the width, in 
particular to the upper limit of the width, of a window over which the bits of 
the respective exponent or scalar (e/) are read, and 

significantly shorter than the maximum length of each exponent or scalar (e,), 
in particular is selected prior to method step [a.l] and/or [a.2]. 
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4. (Currently Amended) A method as claimed in at least one of olaims 1 to 3 c laim 1 , 
characterized in that 

in the case of (multi-)exponentiation, method step [c] of recoding the chunks 

or parts {e,^^ can be divided into the following substeps for each individual 

chunk or for each individual part (^/.O of each exponent (e/): 
[c.l] setting a temporary variable (x) to a stsmdardized value, in particular to the 

value 1 of the element of the group (G) which is neutral with respect to the 

group operation assigned to the group (G); 
[c.2] successively setting a variable {k) to the values r-1, r-2, 0, wherein for 

each value ^ = r-1, r-2, 0 of the variable (k) the following substeps are 

carried out: 

[c.2.i] for each value / = 1 , 2, of an index (/), wherein d is defined as the 

number of elements {gi), in particular depending on the number of exponents 
(ej) assigned to the elements (g,): 
[c.2.i.a] recoding the chunk or part (e/,*) as the sum (E^^ btjT!) of powers of two (2^) 

weighted by in each case at least one coefficient (bij) deriving from at least 
one finite set (C) of integers; 
[c.2.i.b] if the coefficient (6^,^,) assigned to the highest power of two (2^) does not 

vanish: setting the temporary variable (jc) to the product of temporary variable 
{x) and the power (g *'^) of the element (g,) which is assigned to the 
coefficient (Jbi^) of the highest power of two (2^); 
[c.2.ii] for each value j = Z-1, Z-2, 0 of the index (j): 

[c.2.ii.a] squaring the temporary variable (jc); 

[c.2.ii.b] for each value i = 1 , 2, d of the index (i): 

if the coefficient (JbiJ) assigned to the power of two (2^) does not 
vanish: setting the temporary variable (x) to the product of temporary 
variable (x) and the power (g,*''^) of the element (g,) which is assigned 
to the respective coefficient (biJ) of the power of two (2^); and 
after method step [c] of individually recoding the chunks or parts (e,.*) the 
temporary variable (x) is returned. 

5. (Currently Amended) A method as claimed in at least on e of olaims 1 to 3 claim K 
characterized in that 
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in the case of (multi-)scalar multiplication, method step [c] of recoding the 

chunks or parts {ei^t) can be divided into the following substeps for each 

individual chunk or for each individual part (e^.*) of each exponent {e,): 
[c- ' ] setting a temporary variable (jc) to a standardized value, in particular to the 

value 0 of the element of the group (G) which is neutral with respect to the 

group operation assigned to the group (G); 
[c.2] successively setting a variable {k) to the values r-1 , r-2, 0, wherein for 

each value A: = r-1, r-2, 0 of the variable (k) the following substeps are 

carried out: 

[c.2.i] for each value / = 1 , 2, of an index (/), wherein d is defined as the 

number of elements (g/), in particular depending on the number of scaiars {ei) 
assigned to the elements {gi)\ 
[c.2.i.a] recoding the chunk or part (ea) as the sum (Z/=o^ biJ2!) of powers of two (2^) 

weighted by in each case at least one coefficient (btj) deriving from at least 
one finite set (C) of integers; 
[c.2.i.b] if the coefficient (ba) assigned to the highest power of two (2^) does not 

vanish: setting the temporary variable (x) to the sum of temporary variable {x) 
and the multiple {biXgd of the element {g,) which is assigned to the 
coefficient (6/.^) of the highest power of two (2^); 
[c.2.ii] for each valuey = Z-1 , 0 of the index (j): 

[c.2.ii.a] doubling the temporary variable (x); 

[c.2.ii.b] for each value / = 1 , 2, d of the index (/): 

if the coefficient (6^^) assigned to the power of two (2^) does not 
vanish: setting the temporary variable (x) to the sum of temporary 
variable (x) and the multiple {bfXgd of the element (g,) which is 
assigned to the coefficient (Jbij) of the power of two (2^); and 
after method step [c] of individually recoding the chunks or parts (e/,*) the 
temporary variable (x) is returned. 

6. (Currently Amended) A method as claimed in at l e ast one of claims 1 to 5 claim L 

characterized in that 

the recoded chunk or the receded part (e/.*) is used once and 

the memory unit in which the recoded chunk or the recoded part (ei,*) is 

stored is used to recode the following chunk or the following part (e/,*.;). 
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7. (Currently Amended) A method as claimed in at loast one of claims 1 to 6 c laim 1. 
characterized in that the method is implemented on at least one microprocessor assigned in 
particular to at least one chip card and/or in particular to at least one smart card. 

8. (Currently Amended) A microprocessor which operates in accordance with a 
method as claimed in at least one of c 4 aims 1 to 7 claim 1 . 

9. (Original) A device, in particular a chip card and/or in particular a smart card, 
having at least one microprocessor as claimed in claim 8. 

10. (Currently Amended) The use of a method as claimed in at least on e of claimo 1 to 
?- claim la nd/or of at least one microprocessor as claimed in claim 8 and/or of at least one 
device, in particular of at least one chip card and/or in particular of at least one smart card, as 
claimed in claim 9, in at least one cryptosystem, in particular in at least one public key 
cryptosystem, in at least one key exchange system or in at least one signature system. 
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